Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix False Positive: Sends eth without checking msg.sender #814

Merged
merged 1 commit into from
Mar 6, 2025

Conversation

alexroan
Copy link
Contributor

@alexroan alexroan commented Mar 6, 2025

Unfortunately, our call graph doesn't navigate into modifiers that are present in contracts outside of the scope.

We may need to tweak the workspace_context building to account for two classes of context:

  1. In Scope nodes
  2. Out of scope nodes

In-scope should be capturable, out of scope not capturable, but available to the detectors to find additional context about the in scope nodes. (cc @TilakMaddy )

@alexroan alexroan marked this pull request as ready for review March 6, 2025 17:14
@alexroan alexroan merged commit c79a9c3 into dev Mar 6, 2025
40 checks passed
This was referenced Mar 10, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant